Site Reliability Engineer

Job Description – Azure Site Reliability Engineer (SRE)

Role Title Azure Site Reliability Engineer (SRE)

Role Summary We are hiring Azure SREs to engineer reliability at scale across mission-critical workloads in a regulated environment. You will design and operate highly available, secure, and cost-efficient Azure platforms with a Terraform-first approach, strong automation, and deep observability. The role includes on-call, incident management, and continuous improvement to reduce toil and improve SLAs/SLOs.

Key Responsibilities

SRE Foundations

· Define SLIs/SLOs, manage error budgets, and gate releases based on reliability risk.

· Lead on-call rotations, major incident response, and blameless postmortems with action tracking.

· Run game days, chaos/resilience drills, and drive toil reduction via automation.

Azure Platform & Governance

· Build CAF-aligned Landing Zones (hub-spoke/Virtual WAN), enforce Azure Policy as Code, tagging, and RBAC/PIM models.

· Engineer secure network topologies: Private Link/Endpoints, Azure Firewall/WAF, DDoS, ExpressRoute, Private DNS.

Infrastructure as Code & Automation

· Terraform (mandatory): design reusable modules, manage remote state & locking, implement policy checks (e.g., tfsec/Checkov/Conftest).

· Implement CI/CD with Azure DevOps/GitHub Actions; automate with PowerShell, Azure CLI, Python.

· Use Key Vault & workload identity for secretless pipelines; enforce PR reviews and plan/apply gates.

Kubernetes (AKS) Operations

· Operate AKS: upgrades (surge), node pool mgmt, HPA/VPA, cluster autoscaler.

· Enforce Network Policies, Pod Security, admission control (OPA/Gatekeeper); secure secrets and images.

· GitOps (Flux/ArgoCD), hardened ACR, image provenance and supply chain controls.

Observability & AIOps

· Build full-stack monitoring with Azure Monitor, Log Analytics, Application Insights, Prometheus/Grafana.

· Create KQL dashboards/alerts, enable synthetic monitoring, and correlate traces with OpenTelemetry.

· Reduce MTTR using automated runbooks (Functions/Logic Apps/Automation) and optimize log/metrics cost.

Resilience, DR & Backup

· Architect HA/DR using Azure Site Recovery (ASR) and region pairs; define & test RTO/RPO.

· Operate Azure Backup with immutability/soft delete; enable Key Vault purge protection.

· Conduct periodic failover/restore drills with evidence and remediation follow-ups.

Security & Compliance

· Implement Zero Trust with Entra ID (RBAC, PIM, Conditional Access), Managed Identities, and least-privilege.

· Enforce baselines with Defender for Cloud; integrate Microsoft Sentinel detections and SOAR playbooks.

· Support audits with change control, evidence, and segregation of duties.

Cost & Capacity (FinOps)

· Set budgets & alerts, rightsizing, reservations/savings plans, storage tiering.

· Optimize observability/storage retention and data flows for cost efficiency.

Required Qualifications

· 5+ years of overall IT industry experience with at least 3+ years of hands on expertise in Azure Site Reliability Engineering.

· Hands-on Terraform (mandatory): module design, state management, pipelines, policy/scanning, drift detection.

· Strong Azure infrastructure: compute, storage, networking (hub-spoke/vWAN, Private Link, Firewall/WAF, DDoS, ExpressRoute).

· AKS operations and container security fundamentals.

· Observability: Azure Monitor, App Insights, KQL, Prometheus/Grafana; SLO dashboarding.

· DR/Backup expertise: ASR, Azure Backup, RTO/RPO planning and test execution.

· Automation proficiency: PowerShell, Azure CLI, Python; Azure Functions/Logic Apps/Automation Accounts.

· Identity & security: Entra ID, RBAC/PIM, Key Vault, Defender for Cloud.

· Certifications: AZ-104 mandatory

Nice to Have

· Microsoft Sentinel (detections, hunting, SOAR runbooks).

· Chaos Studio, performance/load testing, progressive delivery (Blue/Green, Canary, feature flags).

· Data HA/DR across Azure SQL DB/MI, PostgreSQL Flexible Server.

· FinOps practices and cost optimization playbooks.

· Certifications: AZ-305, AZ-400, AZ-700, AZ-500.